Smart Sso
1 CVEs
product
Monthly
Smart SSO up to version 2.1.1 contains a reflected cross-site scripting vulnerability in the login page's redirectUri parameter that allows unauthenticated remote attackers to execute arbitrary JavaScript in users' browsers. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early disclosure notification.
XSS
Smart Sso
NVD
VulDB
CVSS 3.1
4.3
EPSS
0.0%
CVE-2026-2971
EPSS 0%
CVSS 4.3
MEDIUM
POC
This Month
Smart SSO up to version 2.1.1 contains a reflected cross-site scripting vulnerability in the login page's redirectUri parameter that allows unauthenticated remote attackers to execute arbitrary JavaScript in users' browsers. Public exploit code exists for this vulnerability, and the vendor has not released a patch despite early disclosure notification.
XSS
Smart Sso
NVD
VulDB